Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A72E802031F795155D91B28F1CAD336A9A80E192.cer
File:                     A72E802031F795155D91B28F1CAD336A9A80E192.cer (raw, json)
Hash identifier:          YZ9cUwPBEGZbqcB/UsON9P8Hs1hY5TUQjVEOkBziwpA=
Subject key identifier:   A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16E2BD1D333CDEC066BB7906556AED590E9447A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/A72E802031F795155D91B28F1CAD336A9A80E192.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 18:25:50 +0000
Certificate not after:    Tue 16 Jul 2024 18:30:50 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e2:bd:1d:33:3c:de:c0:66:bb:79:06:55:6a:ed:59:0e:94:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 18:25:50 2023 GMT
            Not After : Jul 16 18:30:50 2024 GMT
        Subject: CN=A72E802031F795155D91B28F1CAD336A9A80E192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:0a:d8:62:bf:5e:6d:77:94:99:6b:c9:25:
                    2b:0d:53:d4:a5:19:16:c0:2c:02:61:08:92:99:fe:
                    91:da:73:5a:3e:9f:4c:c6:70:82:21:ee:da:bc:6b:
                    0e:1d:16:c2:ee:cf:34:ac:b4:08:ae:95:9c:47:51:
                    c4:6c:48:59:fe:a4:83:ef:ba:0d:99:79:ac:2a:71:
                    aa:d6:8b:64:cb:5f:98:d0:79:d2:44:ef:f7:de:ce:
                    e6:2b:bd:d1:5b:e0:4a:b1:7b:92:15:f4:71:9e:d4:
                    d5:c5:d4:51:5b:07:cc:88:07:8c:f3:f1:55:5e:00:
                    49:18:e4:56:c7:65:a8:2a:4e:a3:9f:b5:9a:3b:4c:
                    77:67:ba:0d:68:5b:4b:6b:6f:2c:f3:57:bd:bf:17:
                    dd:65:93:ac:77:c4:80:12:50:64:e5:ba:18:e8:a4:
                    ca:9d:25:94:52:c3:08:89:d3:96:33:06:8c:11:d2:
                    53:00:76:05:c3:c1:2c:9f:d5:61:77:9f:b1:f4:69:
                    93:16:cd:31:74:44:63:d0:42:c0:62:08:63:de:de:
                    fe:0e:ef:d6:5c:4b:af:48:6a:02:46:dd:fc:73:cd:
                    75:80:56:de:94:d3:69:4f:a4:9f:c4:e9:ca:b4:20:
                    03:21:77:2c:a1:58:e0:82:9e:db:af:60:18:bf:ef:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/A72E802031F795155D91B28F1CAD336A9A80E192.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:fd:ea:28:b6:98:15:ce:5b:77:56:27:a5:e2:6f:b0:3b:
         96:cb:a1:e7:20:5a:b4:69:57:6c:1d:7e:43:09:35:db:31:7f:
         19:ea:bb:16:f5:3b:07:29:d1:6a:b0:d6:13:2a:05:e5:1c:7d:
         32:42:83:d9:ce:61:98:a5:df:a5:a7:11:2b:56:6d:67:45:10:
         e9:4f:0c:90:ae:87:de:98:38:4b:90:32:c2:c0:09:f8:04:aa:
         51:b8:8d:9e:90:2a:22:15:c0:04:95:5e:4b:27:58:1e:e0:a1:
         a0:75:45:28:ea:68:00:c8:2b:1e:32:41:6f:5b:2d:0d:24:b0:
         2e:2c:6b:9e:f9:cb:f2:e3:84:db:81:91:8a:76:38:19:27:59:
         c4:d2:f0:4b:cc:ee:99:ab:1c:d3:0e:24:8f:b6:60:f1:6c:9d:
         36:25:b8:74:4f:b9:10:1e:c8:72:0c:a8:76:ce:59:25:d2:80:
         0f:20:89:9c:db:83:58:1f:f6:d9:1d:65:c1:f7:c0:73:8e:cb:
         7d:58:e4:46:4d:95:18:d6:41:b5:f5:0d:61:17:6d:27:b5:9e:
         ca:92:8f:b8:6f:5b:e3:5f:bc:a3:c9:a8:93:73:4d:3f:bd:e8:
         ba:ef:9a:52:25:1e:fb:7e:f6:ea:86:b3:42:60:ee:ec:fb:3d:
         9c:26:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org